7.4
Élevée
CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature
Description
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fast Datapath for Red Hat Enterprise Linux 8 | Versions non publiées | |
| Fast Datapath for Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | Versions non publiées | |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 8.8 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions non publiées |
Afficher les 6 autres branches Masquer les 6 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 9.2 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions non publiées | |
| Fast Datapath for RHEL 7 | Versions non publiées | |
| Fast Datapath for RHEL 8 | Versions non publiées | |
| Fast Datapath for RHEL 9 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4 | Versions non publiées |
Références
- RHSA-2025:0208 access.redhat.com
- RHSA-2025:0209 access.redhat.com
- RHSA-2025:0210 access.redhat.com
- RHSA-2025:0211 access.redhat.com
- RHSA-2025:0220 access.redhat.com
- RHSA-2025:0221 access.redhat.com
- RHSA-2025:0222 access.redhat.com
- RHSA-2025:3963 access.redhat.com
- RHSA-2025:3964 access.redhat.com
- RHSA-2025:3965 access.redhat.com
- RHSA-2025:3970 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2327955 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Fast Datapath for Red Hat Enterprise Linux 8
Les 7 CVE de Fast Datapath for Red Hat Enterprise Linux 8 →
CVE-2026-5265
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original…
6.5
Moyenne
CVE-2026-5367
A flaw was found in OVN (Open Virtual Network)
8.6
Élevée
CVE-2025-0650
A flaw was found in the Open Virtual Network (OVN)
8.1
Élevée
CVE-2024-52337
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
5.5
Moyenne